The Role Mining Problem: A formal perspective

ACM Transactions on Information and System Security

Volumn 13, Issue 3, 2010, Pages

  Vaidya, Jaideep ^a   Atluri, Vijayalakshmi ^a   Guo, Qi ^a  

^a RUTGERS UNIVERSITY   (United States)

Author keywords

RBAC; Role engineering; Role mining

Indexed keywords

DATA ANALYSIS; HEURISTIC SOLUTIONS; INTERESTINGNESS; KEY PROBLEMS; MINING PROBLEMS; NP COMPLETE PROBLEMS; OPTIMAL SETS; RBAC; ROLE ENGINEERING; ROLE-BASED ACCESS CONTROL; THEORETICAL BOUNDS;

DATA REDUCTION;

ACCESS CONTROL;

EID: 77955190756     PISSN: 10949224     EISSN: 15577406     Source Type: Journal    
DOI: 10.1145/1805974.1895983     Document Type: Conference Paper

References (31)

1. BROOKS, K. 1999. Migrating to role-based access control. In Proceedings of the 4th Workshop on Role-Based Access Control. ACM, New York, 71-81.
2. COYNE, E. J. 1996. Role engineering. In Proceedings of the 1st Workshop on Role-Based Access Control. ACM, New York, 4.
3. DAMM, C., KIM, K. H., AND ROUSH, F. 1999. On covering and rank problems for Boolean matrices and their applications. In Proceedings of the 5th Annual International Conference on Computing and Combinatorics. Springer-Verlag, Berlin, 123-133.
4. ENE, A.,HORNE, W.,MILOSAVLJEVIC, N., RAO, P., SCHREIBER, R., AND JAN, R. T. 2008. Fast exact and heuristic methods for role minimization problems. In Proceedings of the Symposium on Access Control Models and Technologies. ACM, New York.
5. EPSTEIN, P. AND SANDHU, R. 2001. Engineering of role/permission assignments. In Proceedings of the 17th Annual Computer Security Applications Conference. IEEE, Los Alamitos, CA, 127-136.
6. FERNANDEZ, E. B. AND HAWKINS, J. C. 1997. Determining role rights from use cases. In Proceedings of the 2nd Workshop on Role-Based Access Control. ACM, New York, 121-125.
7. FERRAIOLO, D. F., SANDHU, R., GAVRILA, S., KUHN, D. R., AND CHANDRAMOULI, R. 2001. Proposed nist standard for role-based access control. ACM Trans. Inform. Syst. Secur. 4, 3, 224-274.
8. GALLAGHER, M. P.,O'CONNOR, A. C., AND KROPP, B. 2002. The economic impact of role-based access control. Planning report 02-11, National Institute of Standards and Technology.
9. GAREY, M. R. AND JOHNSON, D. S. 1979. Computers and Intractability: A Guide to the Theory of NP-Completeness. W. H. Freeman, New York.
10. GEERTS, F., GOETHALS, B., AND MIELIKAINEN, T. 2004. Tiling databases. In Discovery Science. Springer-Verlag, Berlin, 278-289.
11. HAN, J., PEI, J., AND YIN, Y. 2000. Mining frequent patterns without candidate generation. In Proceedings of the International Conference on Management of Data. ACM, New York, 1-12.
12. HOCHBAUM, D. S. 1998. Approximating clique and biclique problems. J. Algorithms 29, 1, 174-200.
13. KERN, A., KUHLMANN, M., SCHAAD, A., AND MOFFETT, J. 2002. Observations on the role lifecycle in the context of enterprise security management. In Proceedings of the 7th Symposium on Access Control Models and Technologies. ACM, New York, 43-51.
14. KUHLMANN, M., SHOHAT, D., AND SCHIMPF, G. 2003. Role mining-revealing business roles for security administration using data mining technology. In Proceedings of the 8th Symposium on Access Control Models and Technologies. ACM, New York, 179-186.
15. LU, H., VAIDYA, J., AND ATLURI, V. 2008. Optimal Boolean matrix decomposition: Application to role engineering. In Proceedings of the 24th International Conference on Data Engineering. IEEE, Los Alamitos, CA, 297-306.
16. MARKOWSKY, G. 1992. Ordering d-classes and computing schein rank is hard. Semi-Group Forum 44, 373-375.
17. MIELIKÄINEN, T. 2003. Intersecting data to closed sets with constraints. In Proceedings of the Workshop on Frequent Itemset Mining Implementations. CEUR, The Netherlands.
18. MIETTINEN, P. 2006. The discrete basis problem, master's thesis. M.S. thesis, University of Helsinki.
19. MIETTINEN, P., MIELIKAINEN, T., GIONIS, A., DAS, G., AND MANNILA, H. 2006. The discrete basis problem. In Proceedings of the 10th European Conference on Principles and Knowledge Discovery in Databases. Springer, Berlin, 335-346.
20. MISHRA, N.,RON, D., AND SWAMINATHAN, R. 2003. On finding large conjunctive clusters. In Learning Theory and Kernel Machines: Proceedings of the 16th Annual Conference on Learning Theory and 7th Kernel Workshop (COLT/Kernel'03). Springer, Berlin, 448-462.
21. MOLLOY, I., CHEN, H., LI, T., WANG, Q., LI, N., BERTINO, E., CALO, S., AND LOBO, J. 2008. Mining roles with semantic meanings. In Proceedings of the 13th Symposium on Access Control Models and Technologies. ACM, New York, 21-30.
22. NEUMANN, G. AND STREMBECK, M. 2002. A scenario-driven role engineering process for functional rbac roles. In Proceedings of the 7th Symposium on Access Control Models and Technologies. ACM, New York, 33-42.
23. PAN, F.,CONG, G.,TUNG, A. K.H.,YANG, J., AND ZAKI, M. J. 2003. Carpenter: Finding closed patterns in long biological datasets. In Proceedings of the 9th International Conference on Knowledge Discovery and Data Mining. ACM, New York, 637-642.
24. PEETERS, R. 2003. Themaximum edge biclique problem is np-complete. Discrete Appl. Math. 131, 3, 651-654.
25. ROECKLE, H., SCHIMPF, G., AND WEIDINGER, R. 2000. Process-oriented approach for role-finding to implement role-based security administration in a large industrial organization. In Proceedings of the 5th Workshop on Role-based Access Control. ACM, New York, 103-110.
26. SANDHU, R. S., COYNE, E. J., FEINSTEIN, H. L., AND YOUMAN, C. E. 1996. Role-based access control models. IEEE Computer 29, 2, 38-47.
27. SCHAAD, A.,MOFFETT, J., AND JACOB, J. 2001. The role-based access control system of a European bank: a case study and discussion. In Proceedings of the 6th Symposium on Access ControlModels and Technologies. ACM, New York, 3-9.
28. SCHLEGELMILCH, J. AND STEFFENS, U. 2005. Role mining with orca. In Proceedings of the 10th Symposium on Access Control Models and Technologies. ACM, New York, 168-176.
29. SHIN, D., AHN, G.-J., CHO, S., AND JIN, S. 2003. On modeling system-centric information for role engineering. In Proceedings of the 8th Symposium on Access Control Models and Technologies. ACM, New York, 169-178.
30. THOMSEN, D., O'BRIEN, R., AND BOGLE, J. 1998. Role-based access control framework for network enterprises. In Proceedings of the 14th Annual Computer Security Applications Conference. IEEE, Los Alamitos, CA, 50-58.
31. VAIDYA, J., ATLURI, V., AND WARNER, J. 2006. Roleminer: Finding roles using subset enumeration. In Proceedings of the 13th Conference on Computer and Communications Security. ACM, New York.